Information Security Engineer

📋 Description

• Drive ISO 27001 ISMS implementation, maintenance, and audit readiness.
• Support SOC 2 Type II compliance, including controls and audits.
• Conduct and document internal audits; manage findings and remediation.
• Own and evolve company risk management program, including risk register and scoring.
• Govern AWS security: posture, access controls, baselines.
• Collaborate with Red Team and Blue Team to track and close findings.

🎯 Requirements

• ISO 27001, ISMS, audits, and control frameworks expertise.
• Hands-on risk management: identification, scoring, mitigation.
• BCM and disaster recovery planning experience.
• AWS services and cloud security governance: IAM, logging, baselines.
• SOC 2 Type II framework familiarity.
• KVKK and GDPR privacy regulations knowledge.

🎁 Benefits

• Monthly meal allowance
• Private health insurance
• Access to learning resources (Spotify, LinkedIn Learning, Blinkist, CloudGuru)
• Internal trainings on AI fundamentals, coding, languages
• ESOP / share ownership
• Volunteer opportunities and social impact programs